7359363fd6e7b3d86e3f124c59b08418_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7359363fd6e7b3d86e3f124c59b08418_JaffaCakes118
Size

14KB
MD5

7359363fd6e7b3d86e3f124c59b08418
SHA1

209ab5efd748a5f6ad788b3466e7d2d5ce8e2156
SHA256

cc003d17374721c31a1a3fc41ab6f557c59386bdd7275458d82e1cbda7eb8160
SHA512

84780563ad61f6fc92ecfdd43048c60fdb7fe9b087044d2cbcde34adc8e1120c3d2aff929666644338d63f9a997b72867d166c2559779f70f6010d3ada2d3448
SSDEEP

384:h6jFnj3a1tf04vg41MGsnrMrMa7VaJgFay:h6jFnjQ904gGsnrKvhWgFl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7359363fd6e7b3d86e3f124c59b08418_JaffaCakes118

Files

7359363fd6e7b3d86e3f124c59b08418_JaffaCakes118
.exe windows:4 windows x86 arch:x86

058dc95f89656af78e1cde9d00861259

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateProcessA
ExitProcess
GetEnvironmentVariableA
GetModuleFileNameA
GetShortPathNameA
GetThreadContext
ReadProcessMemory
ResumeThread
SetThreadContext
VirtualAllocEx
WriteProcessMemory
lstrcatA
lstrcpyA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE